Global user record remains after identity removal in CA Identity Suite

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

When attempting to remove an identity in CA Identity Suite, the user record is deleted from the user store, but the corresponding global user record persists. This issue is typically accompanied by a "Failed to construct search filter" error in the application server logs.

Environment

Identity Manager 14.x

Cause

The persistence of the global user record is caused by a cache inconsistency on the application server layer. This inconsistency prevents the system from properly resolving attributes during the synchronization process, leading to the "No items found" error when the system attempts to update the provisioning user.

Resolution

To resolve this issue and clear the inconsistent state, restart the JVM on the application server.

Error Log Details When this issue occurs, the following entries are typically observed in the application server logs:

ERROR [ims.llsdk.directory.jndi] Failed to construct search filter  [Date/Time] ERROR [im.provisioning.synchronizeoutbound.ProvisioningDirectorySynchronizationListener] (Event=...) Failed to update the provisioning user: No items found  [facility=4 severity=2 reason=0 status=38 message=No items found]  Attempting to search for unknown wellknown attribute %GROUP_MEMBERSHIP%  [facility=4 severity=2 reason=0 status=38 message=No items found]